putitoutthere 0.3.17 → 0.3.19

package/dist/check/workspace-member-manifests.js

@@ -0,0 +1,23 @@
+import { dirname, join } from 'node:path';
+import { expandDirGlob } from '../glob.js';
+export async function workspaceMemberManifests(parsed, cargoTomlPath) {
+    const workspace = parsed.workspace;
+    if (typeof workspace !== 'object' || workspace === null) {
+        return [];
+    }
+    const members = workspace.members;
+    if (!Array.isArray(members)) {
+        return [];
+    }
+    const workspaceDir = dirname(cargoTomlPath);
+    const out = [];
+    for (const m of members) {
+        if (typeof m === 'string') {
+            for (const memberDir of await expandDirGlob(workspaceDir, m)) {
+                out.push(join(memberDir, 'Cargo.toml'));
+            }
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=workspace-member-manifests.js.map

package/dist/check/workspace-member-manifests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-member-manifests.js","sourceRoot":"","sources":["../../src/check/workspace-member-manifests.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAA+B,EAC/B,aAAqB;IAErB,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QAAA,OAAO,EAAE,CAAC;IAAA,CAAC;IACrE,MAAM,OAAO,GAAI,SAAmC,CAAC,OAAO,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAAA,OAAO,EAAE,CAAC;IAAA,CAAC;IACzC,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,KAAK,MAAM,SAAS,IAAI,MAAM,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/check.d.ts

@@ -6,11 +6,12 @@
  * consumer's repo state alone runs at PR time, before a release run
  * could fail mid-publish on a precondition checkable in milliseconds.
  *
- * Each check function returns findings; the top-level `runChecks`
- * aggregates them so the consumer fixes everything in one round-trip
- * rather than chasing one error at a time across re-runs. `require-`
- * style throwing helpers live in `preflight.ts` for the publish path;
- * this file is read-only diagnostic.
+ * Each check function (one per module under `check/`) returns
+ * findings; the top-level `runChecks` aggregates them so the consumer
+ * fixes everything in one round-trip rather than chasing one error at
+ * a time across re-runs. `require-` style throwing helpers live in
+ * `preflight.ts` for the publish path; this entry point is read-only
+ * diagnostic.
  *
  * Non-goal #8 (parallel diagnostic surfaces): every check here either
  * already runs at publish time via `preflight.ts` / `plan.ts` /

package/dist/check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AA4BH,MAAM,WAAW,YAAY;IAC3B;yEACqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;iDAC6C;IAC7C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;GASG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CA6C3E"}
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAsBH,MAAM,WAAW,YAAY;IAC3B;yEACqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;iDAC6C;IAC7C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;GASG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CA6C3E"}

package/dist/check.js

@@ -6,11 +6,12 @@
  * consumer's repo state alone runs at PR time, before a release run
  * could fail mid-publish on a precondition checkable in milliseconds.
  *
- * Each check function returns findings; the top-level `runChecks`
- * aggregates them so the consumer fixes everything in one round-trip
- * rather than chasing one error at a time across re-runs. `require-`
- * style throwing helpers live in `preflight.ts` for the publish path;
- * this file is read-only diagnostic.
+ * Each check function (one per module under `check/`) returns
+ * findings; the top-level `runChecks` aggregates them so the consumer
+ * fixes everything in one round-trip rather than chasing one error at
+ * a time across re-runs. `require-` style throwing helpers live in
+ * `preflight.ts` for the publish path; this entry point is read-only
+ * diagnostic.
  *
  * Non-goal #8 (parallel diagnostic surfaces): every check here either
  * already runs at publish time via `preflight.ts` / `plan.ts` /
@@ -22,21 +23,24 @@
  *
  * Issue #319.
  */
-import { readFile, stat } from 'node:fs/promises';
-import { dirname, isAbsolute, join, resolve } from 'node:path';
-import { parse as parseToml } from 'smol-toml';
-import { assertNoCycles } from './cascade.js';
+import { isAbsolute, join, resolve } from 'node:path';
 import { checkCratesPackageSize } from './check-crate-size.js';
+import { checkCargoShapeFindings } from './check/check-cargo-shape-findings.js';
+import { checkCratesPackageMetadata } from './check/check-crates-package-metadata.js';
+import { checkDependsOn } from './check/check-depends-on.js';
+import { checkGlobsMatchTrackedFiles } from './check/check-globs-match-tracked-files.js';
+import { checkNpmRepository } from './check/check-npm-repository.js';
+import { checkNpmTargetTriples } from './check/check-npm-target-triples.js';
+import { checkPackageJsonShapeFindings } from './check/check-package-json-shape-findings.js';
+import { checkPaths } from './check/check-paths.js';
+import { checkPypiVersion } from './check/check-pypi-version.js';
+import { checkPyprojectAndBundleCli } from './check/check-pyproject-and-bundle-cli.js';
+import { checkPyprojectShapeFindings } from './check/check-pyproject-shape-findings.js';
+import { checkRepoUrlMatchFindings } from './check/check-repo-url-match-findings.js';
+import { checkTagTemplateCollisions } from './check/check-tag-template-collisions.js';
 import { loadConfig } from './config.js';
-import { ErrorCodes } from './error-codes.js';
-import { expandDirGlob, matchesAny } from './glob.js';
-import { execCapture } from './utils/exec-capture.js';
-import { pathExists } from './utils/path-exists.js';
-import { assertTripleSupported } from './handlers/npm-platform.js';
-import { checkCargoShape, checkCratesMetadata, checkPackageJsonShape, checkProvenanceMetadata, checkPyprojectShape, checkPypiVersionSource, checkRepoUrlMatch, } from './preflight.js';
-import { formatTag } from './tag-template.js';
 import { toError } from './to-error.js';
-import { normalizeTarget } from './types.js';
+import { pathExists } from './utils/path-exists.js';
 /**
  * Run every check that's knowable from the consumer's repo state
  * alone. Returns an aggregated finding list; an empty list means a
@@ -90,294 +94,4 @@ export async function runChecks(opts) {
     await checkRepoUrlMatchFindings(packages, findings);
     return findings;
 }
-async function checkRepoUrlMatchFindings(packages, findings) {
-    // Sourced from GHA's process env at PR time when this runs inside the
-    // reusable workflow. Locally invoked `putitoutthere check` outside any
-    // GHA context will skip the check (the preflight returns no findings
-    // when GITHUB_REPOSITORY is unset), which is the right behaviour:
-    // there is no workflow source to disagree with.
-    const githubRepository = process.env.GITHUB_REPOSITORY;
-    for (const f of await checkRepoUrlMatch(packages, { githubRepository })) {
-        findings.push({
-            package: f.package,
-            message: `[${ErrorCodes.REPO_URL_MISMATCH}] ${f.manifestPath}: declared repository "${f.declaredOwnerRepo}" does not match GITHUB_REPOSITORY "${f.expectedOwnerRepo}". npm rejects \`--provenance\` publishes whose package.json#repository.url disagrees with the OIDC source claim (422); crates.io / PyPI trusted-publisher paths carry the same risk.`,
-        });
-    }
-}
-async function checkPyprojectShapeFindings(packages, findings) {
-    for (const f of await checkPyprojectShape(packages)) {
-        findings.push({
-            package: f.package,
-            message: `[${f.code}] ${f.pyprojectPath}: ${f.detail}`,
-        });
-    }
-}
-async function checkCargoShapeFindings(packages, cwd, findings) {
-    for (const f of await checkCargoShape(packages, { cwd })) {
-        findings.push({
-            package: f.package,
-            message: `[${f.code}] ${f.cargoTomlPath}: ${f.detail}`,
-        });
-    }
-}
-async function checkPackageJsonShapeFindings(packages, findings) {
-    for (const f of await checkPackageJsonShape(packages)) {
-        findings.push({
-            package: f.package,
-            message: `[${f.code}] ${f.packageJsonPath}: ${f.detail}`,
-        });
-    }
-}
-/* ----------------------------- internals ----------------------------- */
-async function checkPaths(packages, findings) {
-    for (const p of packages) {
-        if (!(await pathExists(p.path)) || !(await stat(p.path)).isDirectory()) {
-            findings.push({
-                package: p.name,
-                message: `path "${p.path}" does not exist or is not a directory in the worktree`,
-            });
-        }
-    }
-}
-async function checkGlobsMatchTrackedFiles(packages, cwd, findings) {
-    const tracked = await listTrackedFiles(cwd);
-    if (tracked === null) {
-        return;
-    }
-    for (const p of packages) {
-        const matched = tracked.some((f) => matchesAny(p.globs, f));
-        if (!matched) {
-            findings.push({
-                package: p.name,
-                message: `globs ${JSON.stringify(p.globs)} matched no tracked files. Empty globs mean the package will never cascade on a real commit.`,
-            });
-        }
-    }
-}
-function checkDependsOn(packages, findings) {
-    try {
-        assertNoCycles(packages);
-    }
-    catch (err) {
-        findings.push({
-            message: toError(err).message,
-        });
-    }
-}
-function checkTagTemplateCollisions(packages, findings) {
-    // Templates collide when they resolve to the same tag at the same
-    // version — typically when `{name}` is omitted and every package
-    // thereafter races for one tag slot. A sentinel version is enough:
-    // differing templates differ on every version, identical templates
-    // collide on every version.
-    const seen = new Map();
-    for (const p of packages) {
-        const sentinel = formatTag(p.tag_format, { name: p.name, version: '0.0.0' });
-        const prior = seen.get(sentinel);
-        if (prior !== undefined) {
-            findings.push({
-                message: `tag_format collision: "${p.name}" and "${prior}" both resolve to tag "${sentinel}" at the same version. Include {name} in tag_format to disambiguate.`,
-            });
-        }
-        else {
-            seen.set(sentinel, p.name);
-        }
-    }
-}
-async function checkNpmRepository(packages, findings) {
-    for (const f of await checkProvenanceMetadata(packages)) {
-        const reason = f.reason === 'missing'
-            ? `${f.packageJsonPath} not found`
-            : `${f.packageJsonPath} has missing or empty \`repository\``;
-        findings.push({
-            package: f.package,
-            message: `[${ErrorCodes.NPM_MISSING_REPOSITORY}] ${reason}. \`npm publish --provenance\` hard-requires a non-empty repository.url.`,
-        });
-    }
-}
-async function checkCratesPackageMetadata(packages, findings) {
-    for (const f of await checkCratesMetadata(packages)) {
-        findings.push({
-            package: f.package,
-            message: `[${ErrorCodes.CRATES_MISSING_METADATA}] ${f.cargoTomlPath} missing required Cargo.toml [package] field(s): ${f.missing.join(', ')}. crates.io rejects the publish after cargo's verification build.`,
-        });
-    }
-}
-async function checkPyprojectAndBundleCli(packages, cwd, findings) {
-    for (const p of packages) {
-        if (p.kind !== 'pypi') {
-            continue;
-        }
-        const pyprojectPath = join(p.path, 'pyproject.toml');
-        if (!(await pathExists(pyprojectPath))) {
-            findings.push({
-                package: p.name,
-                message: `pyproject.toml not found at ${pyprojectPath}`,
-            });
-            continue;
-        }
-        if (p.build !== 'maturin' || p.bundle_cli === undefined) {
-            continue;
-        }
-        const bundleCli = p.bundle_cli;
-        // `bundle_cli.crate_path` is documented as relative to the repo
-        // root (see config.ts: default = "."). Resolve against `cwd`,
-        // not the package path.
-        const cratePathAbs = isAbsolute(bundleCli.crate_path)
-            ? bundleCli.crate_path
-            : resolve(cwd, bundleCli.crate_path);
-        const cargoTomlPath = join(cratePathAbs, 'Cargo.toml');
-        if (!(await pathExists(cratePathAbs)) || !(await stat(cratePathAbs)).isDirectory()) {
-            findings.push({
-                package: p.name,
-                message: `bundle_cli.crate_path "${bundleCli.crate_path}" does not exist or is not a directory`,
-            });
-            continue;
-        }
-        if (!(await pathExists(cargoTomlPath))) {
-            findings.push({
-                package: p.name,
-                message: `bundle_cli.crate_path "${bundleCli.crate_path}" has no Cargo.toml`,
-            });
-            continue;
-        }
-        const declaredBins = await readDeclaredBins(cargoTomlPath);
-        if (!declaredBins.includes(bundleCli.bin)) {
-            findings.push({
-                package: p.name,
-                message: `bundle_cli.bin "${bundleCli.bin}" is not declared as a [[bin]] in ${cargoTomlPath}. Declared bins: ${declaredBins.length === 0 ? '(none)' : declaredBins.join(', ')}.`,
-            });
-        }
-    }
-}
-async function checkPypiVersion(packages, findings) {
-    for (const f of await checkPypiVersionSource(packages)) {
-        findings.push({
-            package: f.package,
-            message: `[${ErrorCodes.PYPI_STATIC_VERSION}] ${f.pyprojectPath} declares a static \`[project].version\` literal. Use \`[project].dynamic = ["version"]\` with hatch-vcs (recommended), setuptools-scm, or the maturin Cargo.toml-driven path — putitoutthere does not edit pyproject.toml at release time, so a literal silently ships the previous release.`,
-        });
-    }
-}
-function checkNpmTargetTriples(packages, findings) {
-    for (const p of packages) {
-        if (p.kind !== 'npm') {
-            continue;
-        }
-        const targets = p.targets;
-        if (!targets) {
-            continue;
-        }
-        for (const t of targets) {
-            const { triple } = normalizeTarget(t);
-            try {
-                assertTripleSupported(triple, p.name);
-            }
-            catch (err) {
-                findings.push({
-                    package: p.name,
-                    message: toError(err).message,
-                });
-            }
-        }
-    }
-}
-async function listTrackedFiles(cwd) {
-    try {
-        const { stdout } = await execCapture('git', ['ls-files'], { cwd });
-        return stdout.split('\n').filter((l) => l.length > 0);
-    }
-    catch {
-        return null;
-    }
-}
-async function readDeclaredBins(cargoTomlPath) {
-    const parsed = await parseCargoToml(cargoTomlPath);
-    if (parsed === null) {
-        return [];
-    }
-    const result = collectBinsFromManifest(parsed);
-    // Workspace manifests delegate [[bin]] declarations to member crates
-    // (#337). `cargo build --bin X` from anywhere in the workspace
-    // resolves X transparently, so a check that only reads the
-    // workspace-root manifest reports bins as missing even when they
-    // exist in a member. Walk `[workspace].members` so `crate_path = "."`
-    // (the default) satisfies the standard cargo-workspace shape.
-    // `members` entries are globs, expanded against the filesystem the way
-    // cargo resolves them. parseCargoToml returns null for missing /
-    // malformed manifests, so stray entries silently drop out — cargo's
-    // own diagnostics own surfacing those.
-    for (const memberManifest of await workspaceMemberManifests(parsed, cargoTomlPath)) {
-        const memberParsed = await parseCargoToml(memberManifest);
-        if (memberParsed === null) {
-            continue;
-        }
-        for (const b of collectBinsFromManifest(memberParsed)) {
-            if (!result.includes(b)) {
-                result.push(b);
-            }
-        }
-    }
-    return result;
-}
-async function workspaceMemberManifests(parsed, cargoTomlPath) {
-    const workspace = parsed.workspace;
-    if (typeof workspace !== 'object' || workspace === null) {
-        return [];
-    }
-    const members = workspace.members;
-    if (!Array.isArray(members)) {
-        return [];
-    }
-    const workspaceDir = dirname(cargoTomlPath);
-    const out = [];
-    for (const m of members) {
-        if (typeof m === 'string') {
-            for (const memberDir of await expandDirGlob(workspaceDir, m)) {
-                out.push(join(memberDir, 'Cargo.toml'));
-            }
-        }
-    }
-    return out;
-}
-async function parseCargoToml(path) {
-    let raw;
-    try {
-        raw = await readFile(path, 'utf8');
-    }
-    catch {
-        return null;
-    }
-    try {
-        return parseToml(raw);
-    }
-    catch {
-        return null;
-    }
-}
-function collectBinsFromManifest(parsed) {
-    const result = [];
-    const bins = parsed.bin;
-    if (Array.isArray(bins)) {
-        for (const entry of bins) {
-            if (typeof entry === 'object' && entry !== null) {
-                const name = entry.name;
-                if (typeof name === 'string') {
-                    result.push(name);
-                }
-            }
-        }
-    }
-    // Cargo's implicit-binary rule: a crate without any explicit [[bin]]
-    // table ships a binary named after `[package].name` when
-    // `src/main.rs` exists. Include that name as a candidate so the
-    // common single-binary shape (one crate, one bin, no [[bin]] block)
-    // doesn't spuriously fail this check.
-    if (result.length === 0) {
-        const pkg = parsed.package;
-        if (pkg && typeof pkg.name === 'string') {
-            result.push(pkg.name);
-        }
-    }
-    return result;
-}
 //# sourceMappingURL=check.js.map

package/dist/check.js.map

@@ -1 +1 @@
-{"version":3,"file":"check.js","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE/D,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAgB,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,eAAe,EAAoB,MAAM,YAAY,CAAC;AAiB/D;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAkB;IAChD,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAEnE,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,mCAAmC,OAAO,8GAA8G;SAClK,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,QAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;QACzC,mEAAmE;QACnE,8DAA8D;QAC9D,gDAAgD;QAChD,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrC,GAAG,CAAC;YACJ,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC;SACzD,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO;SAC9B,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACrC,MAAM,2BAA2B,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3D,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnC,0BAA0B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,0BAA0B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACrD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,0BAA0B,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,2BAA2B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,uBAAuB,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,6BAA6B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxD,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1C,MAAM,yBAAyB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEpD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,QAA4B,EAC5B,QAAwB;IAExB,sEAAsE;IACtE,uEAAuE;IACvE,qEAAqE;IACrE,kEAAkE;IAClE,gDAAgD;IAChD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,MAAM,iBAAiB,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;QACxE,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,IAAI,UAAU,CAAC,iBAAiB,KAAK,CAAC,CAAC,YAAY,0BAA0B,CAAC,CAAC,iBAAiB,uCAAuC,CAAC,CAAC,iBAAiB,uLAAuL;SAC3V,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,QAA4B,EAC5B,QAAwB;IAExB,KAAK,MAAM,CAAC,IAAI,MAAM,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,MAAM,EAAE;SACvD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,QAA4B,EAC5B,GAAW,EACX,QAAwB;IAExB,KAAK,MAAM,CAAC,IAAI,MAAM,eAAe,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,MAAM,EAAE;SACvD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,QAA4B,EAC5B,QAAwB;IAExB,KAAK,MAAM,CAAC,IAAI,MAAM,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,eAAe,KAAK,CAAC,CAAC,MAAM,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,2EAA2E;AAE3E,KAAK,UAAU,UAAU,CAAC,QAA4B,EAAE,QAAwB;IAC9E,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACvE,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,wDAAwD;aACjF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,QAA4B,EAC5B,GAAW,EACX,QAAwB;IAExB,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,OAAO,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,8FAA8F;aACxI,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,QAA4B,EAAE,QAAwB;IAC5E,IAAI,CAAC;QACH,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO;SAC9B,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CACjC,QAA4B,EAC5B,QAAwB;IAExB,kEAAkE;IAClE,iEAAiE;IACjE,mEAAmE;IACnE,mEAAmE;IACnE,4BAA4B;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,0BAA0B,CAAC,CAAC,IAAI,UAAU,KAAK,0BAA0B,QAAQ,sEAAsE;aACjK,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,QAA4B,EAAE,QAAwB;IACtF,KAAK,MAAM,CAAC,IAAI,MAAM,uBAAuB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,MAAM,GACV,CAAC,CAAC,MAAM,KAAK,SAAS;YACpB,CAAC,CAAC,GAAG,CAAC,CAAC,eAAe,YAAY;YAClC,CAAC,CAAC,GAAG,CAAC,CAAC,eAAe,sCAAsC,CAAC;QACjE,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,IAAI,UAAU,CAAC,sBAAsB,KAAK,MAAM,0EAA0E;SACpI,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,QAA4B,EAC5B,QAAwB;IAExB,KAAK,MAAM,CAAC,IAAI,MAAM,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,IAAI,UAAU,CAAC,uBAAuB,KAAK,CAAC,CAAC,aAAa,oDAAoD,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,mEAAmE;SAC/M,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,QAA4B,EAC5B,GAAW,EACX,QAAwB;IAExB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QAClC,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACrD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACvC,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,OAAO,EAAE,+BAA+B,aAAa,EAAE;aACxD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACpE,MAAM,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC;QAC/B,gEAAgE;QAChE,8DAA8D;QAC9D,wBAAwB;QACxB,MAAM,YAAY,GAAG,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC;YACnD,CAAC,CAAC,SAAS,CAAC,UAAU;YACtB,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACnF,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,OAAO,EAAE,0BAA0B,SAAS,CAAC,UAAU,wCAAwC;aAChG,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACvC,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,OAAO,EAAE,0BAA0B,SAAS,CAAC,UAAU,qBAAqB;aAC7E,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAC3D,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,OAAO,EAAE,mBAAmB,SAAS,CAAC,GAAG,qCAAqC,aAAa,oBAAoB,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aACjL,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,QAA4B,EAC5B,QAAwB;IAExB,KAAK,MAAM,CAAC,IAAI,MAAM,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,IAAI,UAAU,CAAC,mBAAmB,KAAK,CAAC,CAAC,aAAa,+RAA+R;SAC/V,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAA4B,EAC5B,QAAwB;IAExB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACjC,MAAM,OAAO,GAAI,CAAiC,CAAC,OAAO,CAAC;QAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,CAAC;gBACH,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC;oBACZ,OAAO,EAAE,CAAC,CAAC,IAAI;oBACf,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO;iBAC9B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAW;IACzC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACnE,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,aAAqB;IACnD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,CAAC;IACnD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAAA,OAAO,EAAE,CAAC;IAAA,CAAC;IACjC,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC/C,qEAAqE;IACrE,+DAA+D;IAC/D,2DAA2D;IAC3D,iEAAiE;IACjE,sEAAsE;IACtE,8DAA8D;IAC9D,uEAAuE;IACvE,iEAAiE;IACjE,oEAAoE;IACpE,uCAAuC;IACvC,KAAK,MAAM,cAAc,IAAI,MAAM,wBAAwB,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;QACnF,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,CAAC;QAC1D,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,uBAAuB,CAAC,YAAY,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAA,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAA,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,MAA+B,EAC/B,aAAqB;IAErB,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QAAA,OAAO,EAAE,CAAC;IAAA,CAAC;IACrE,MAAM,OAAO,GAAI,SAAmC,CAAC,OAAO,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAAA,OAAO,EAAE,CAAC;IAAA,CAAC;IACzC,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,KAAK,MAAM,SAAS,IAAI,MAAM,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,MAA+B;IAC9D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC;IACxB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAChD,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;gBAChD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAAA,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAA,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IACD,qEAAqE;IACrE,yDAAyD;IACzD,gEAAgE;IAChE,oEAAoE;IACpE,sCAAsC;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAyC,CAAC;QAC7D,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAAA,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAA,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AACtF,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AACtF,OAAO,EAAE,UAAU,EAAgB,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAiBpD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAkB;IAChD,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAEnE,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,mCAAmC,OAAO,8GAA8G;SAClK,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,QAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;QACzC,mEAAmE;QACnE,8DAA8D;QAC9D,gDAAgD;QAChD,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrC,GAAG,CAAC;YACJ,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC;SACzD,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO;SAC9B,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACrC,MAAM,2BAA2B,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3D,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnC,0BAA0B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,0BAA0B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACrD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,0BAA0B,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,2BAA2B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,uBAAuB,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,6BAA6B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxD,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1C,MAAM,yBAAyB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEpD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/handlers/classify-npm-view-failure.d.ts

@@ -0,0 +1,35 @@
+/**
+ * What a failed `npm view` probe actually means (#650).
+ *
+ * `isPublished` asks npm whether a version exists by shelling out to
+ * `npm view <name>@<version> version` and reading the exit status. Every
+ * non-zero exit used to mean the same thing — "not published" — which is
+ * true for the answer the probe was written for (`E404`) and false for
+ * every way the question can fail to be asked at all. A hermetic
+ * (`--network none`) `plan` run reported `verdict: publish` for packages it
+ * had never reached the registry to ask about.
+ *
+ * Three outcomes, keyed off npm's own machine-readable `npm error code`
+ * line:
+ *
+ *  - `absent` — the registry answered and the version is not there
+ *    (`E404`), plus anything unrecognised. The historical behaviour, and
+ *    the conservative default: an unfamiliar code keeps the pre-#650
+ *    reading rather than inventing a new failure mode for it.
+ *  - `unreachable` — the registry hostname does not resolve
+ *    (`ENOTFOUND` / `EAI_AGAIN`). Deterministic within a run: no retry can
+ *    turn a name that does not resolve into one that does, and no answer
+ *    is coming, so the caller reports "unknown", not "not published".
+ *  - `transient` — the registry was reached and faltered (timeouts, reset
+ *    connections, 429, 5xx). These are the cases the retry policy was
+ *    written for, so the caller raises a `TransientError` and lets
+ *    `withRetry` do its job.
+ *
+ * Matching npm's `code` line rather than its prose keeps this stable
+ * across npm's message rewrites; both the modern `npm error` prefix (npm
+ * 11) and the legacy `npm ERR!` one (npm ≤ 10, still on plenty of
+ * consumer runners) are accepted.
+ */
+export type NpmViewFailure = 'absent' | 'unreachable' | 'transient';
+export declare function classifyNpmViewFailure(stderr: string): NpmViewFailure;
+//# sourceMappingURL=classify-npm-view-failure.d.ts.map

package/dist/handlers/classify-npm-view-failure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-npm-view-failure.d.ts","sourceRoot":"","sources":["../../src/handlers/classify-npm-view-failure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,aAAa,GAAG,WAAW,CAAC;AAEpE,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAsCrE"}

package/dist/handlers/classify-npm-view-failure.js

@@ -0,0 +1,77 @@
+/**
+ * What a failed `npm view` probe actually means (#650).
+ *
+ * `isPublished` asks npm whether a version exists by shelling out to
+ * `npm view <name>@<version> version` and reading the exit status. Every
+ * non-zero exit used to mean the same thing — "not published" — which is
+ * true for the answer the probe was written for (`E404`) and false for
+ * every way the question can fail to be asked at all. A hermetic
+ * (`--network none`) `plan` run reported `verdict: publish` for packages it
+ * had never reached the registry to ask about.
+ *
+ * Three outcomes, keyed off npm's own machine-readable `npm error code`
+ * line:
+ *
+ *  - `absent` — the registry answered and the version is not there
+ *    (`E404`), plus anything unrecognised. The historical behaviour, and
+ *    the conservative default: an unfamiliar code keeps the pre-#650
+ *    reading rather than inventing a new failure mode for it.
+ *  - `unreachable` — the registry hostname does not resolve
+ *    (`ENOTFOUND` / `EAI_AGAIN`). Deterministic within a run: no retry can
+ *    turn a name that does not resolve into one that does, and no answer
+ *    is coming, so the caller reports "unknown", not "not published".
+ *  - `transient` — the registry was reached and faltered (timeouts, reset
+ *    connections, 429, 5xx). These are the cases the retry policy was
+ *    written for, so the caller raises a `TransientError` and lets
+ *    `withRetry` do its job.
+ *
+ * Matching npm's `code` line rather than its prose keeps this stable
+ * across npm's message rewrites; both the modern `npm error` prefix (npm
+ * 11) and the legacy `npm ERR!` one (npm ≤ 10, still on plenty of
+ * consumer runners) are accepted.
+ */
+export function classifyNpmViewFailure(stderr) {
+    // Function-scoped, not module-scoped: mutants in module-level initializers
+    // run once at import, where the mutation gate's per-test switching cannot
+    // reach them, so they were reported surviving despite the colocated tests
+    // killing every one when applied by hand.
+    /**
+     * npm's machine-readable failure code, in either prefix spelling:
+     * `npm error code ENOTFOUND` (npm 11) / `npm ERR! code ENOTFOUND` (npm <= 10).
+     *
+     * The prefix sits in a lookbehind rather than a capture group so the match
+     * *is* the code. A capture group would be typed `string | undefined` under
+     * `noUncheckedIndexedAccess`, forcing a `?? ''` fallback for a group that
+     * cannot fail to participate — an unreachable default no test can pin.
+     */
+    const codeLine = /(?<=^npm (?:error|ERR!) code )\S+$/m;
+    /** DNS resolution failed — there is no registry to talk to. */
+    const unreachableCodes = new Set(['ENOTFOUND', 'EAI_AGAIN']);
+    /** The registry was reached and the request faltered. */
+    const transientCodes = new Set([
+        'ETIMEDOUT',
+        'ECONNRESET',
+        'ERR_SOCKET_TIMEOUT',
+        'E429',
+    ]);
+    /** npm renders an HTTP status as `E<status>`; 5xx is the registry's fault. */
+    const serverErrorCode = /^E5[0-9][0-9]$/;
+    const match = codeLine.exec(stderr);
+    if (match === null) {
+        // npm said nothing we can read a code out of. Unrecognised shapes keep
+        // the pre-#650 reading rather than inventing a failure mode for them.
+        return 'absent';
+    }
+    const code = match[0];
+    if (unreachableCodes.has(code)) {
+        return 'unreachable';
+    }
+    if (transientCodes.has(code)) {
+        return 'transient';
+    }
+    if (serverErrorCode.test(code)) {
+        return 'transient';
+    }
+    return 'absent';
+}
+//# sourceMappingURL=classify-npm-view-failure.js.map

package/dist/handlers/classify-npm-view-failure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-npm-view-failure.js","sourceRoot":"","sources":["../../src/handlers/classify-npm-view-failure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAIH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,0CAA0C;IAC1C;;;;;;;;OAQG;IACH,MAAM,QAAQ,GAAG,qCAAqC,CAAC;IACvD,+DAA+D;IAC/D,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IAClF,yDAAyD;IACzD,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;QAClD,WAAW;QACX,YAAY;QACZ,oBAAoB;QACpB,MAAM;KACP,CAAC,CAAC;IACH,8EAA8E;IAC9E,MAAM,eAAe,GAAG,gBAAgB,CAAC;IAEzC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,uEAAuE;QACvE,sEAAsE;QACtE,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAAA,OAAO,aAAa,CAAC;IAAA,CAAC;IACvD,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAAA,OAAO,WAAW,CAAC;IAAA,CAAC;IACnD,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAAA,OAAO,WAAW,CAAC;IAAA,CAAC;IACrD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/handlers/crates.d.ts

@@ -31,10 +31,12 @@
  * narrower version of that check: before invoking cargo, scan the
  * working tree via `git status --porcelain` and refuse to publish
  * if anything is dirty outside the manifests writeVersion just wrote.
- * "Manifests", plural: an inheriting crate's version lives at the
- * workspace root, so the file the bump lands in can sit outside the
- * package directory entirely (#639). If we can't scan (e.g. no git
- * repo), we fall back to cargo's own --allow-dirty behavior.
+ * "Manifests", plural, for two reasons: an inheriting crate's version
+ * lives at the workspace root (#639), and bumping a crate also moves the
+ * in-repo requirements that point at it (#640), which live in other
+ * crates' files. Either way the write can land outside the package
+ * directory entirely. If we can't scan (e.g. no git repo), we fall back
+ * to cargo's own --allow-dirty behavior.
  *
  * OIDC: the crates-io-auth-action GHA step exchanges the OIDC JWT for
  * a short-lived CARGO_REGISTRY_TOKEN in the env. The handler doesn't

package/dist/handlers/crates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crates.d.ts","sourceRoot":"","sources":["../../src/handlers/crates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAKH,OAAO,KAAK,EAAO,OAAO,EAA+B,MAAM,aAAa,CAAC;AA8P7E;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,MAAM,EACtB,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,EACvC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,GACvC,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAqF1B;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAOnE;AA6CD,eAAO,MAAM,MAAM,EAAE,OAOpB,CAAC"}
+{"version":3,"file":"crates.d.ts","sourceRoot":"","sources":["../../src/handlers/crates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAKH,OAAO,KAAK,EAAO,OAAO,EAA+B,MAAM,aAAa,CAAC;AA0Q7E;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,MAAM,EACtB,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,EACvC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,GACvC,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAqF1B;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAOnE;AA6CD,eAAO,MAAM,MAAM,EAAE,OAOpB,CAAC"}

package/dist/handlers/crates.js

@@ -31,10 +31,12 @@
  * narrower version of that check: before invoking cargo, scan the
  * working tree via `git status --porcelain` and refuse to publish
  * if anything is dirty outside the manifests writeVersion just wrote.
- * "Manifests", plural: an inheriting crate's version lives at the
- * workspace root, so the file the bump lands in can sit outside the
- * package directory entirely (#639). If we can't scan (e.g. no git
- * repo), we fall back to cargo's own --allow-dirty behavior.
+ * "Manifests", plural, for two reasons: an inheriting crate's version
+ * lives at the workspace root (#639), and bumping a crate also moves the
+ * in-repo requirements that point at it (#640), which live in other
+ * crates' files. Either way the write can land outside the package
+ * directory entirely. If we can't scan (e.g. no git repo), we fall back
+ * to cargo's own --allow-dirty behavior.
  *
  * OIDC: the crates-io-auth-action GHA step exchanges the OIDC JWT for
  * a short-lived CARGO_REGISTRY_TOKEN in the env. The handler doesn't
@@ -51,6 +53,7 @@ import { USER_AGENT } from '../version.js';
 import { execCapture } from '../utils/exec-capture.js';
 import { elideMiddle } from '../utils/elide-middle.js';
 import { repoRelativePaths } from '../repo-relative-paths.js';
+import { writeDependentVersionReqs } from '../write-dependent-version-reqs.js';
 import { writeResolvedCargoVersion } from '../write-resolved-cargo-version.js';
 import { ExecError } from '../utils/exec-error.js';
 import { matchFirstPublishTpRejection } from './match-first-publish-tp-rejection.js';
@@ -79,7 +82,7 @@ async function isPublishedImpl(pkg, version, _ctx) {
     // returns 200/404 for this endpoint, so anything else is a genuine fault.
     throw new Error(`crates.io GET ${url} returned ${res.status}`);
 }
-async function writeVersionImpl(pkg, version, _ctx) {
+async function writeVersionImpl(pkg, version, ctx) {
     const cargoPath = join(pkg.path, 'Cargo.toml');
     let original;
     try {
@@ -102,12 +105,21 @@ async function writeVersionImpl(pkg, version, _ctx) {
     // Returns the manifests this write MANAGES, which is what the pre-publish
     // dirty-tree guard needs: for an inheriting crate that is a file outside
     // the package directory, and the guard would otherwise refuse on it.
+    let written;
     try {
-        return await writeResolvedCargoVersion(pkg.path, original, version);
+        written = [...(await writeResolvedCargoVersion(pkg.path, original, version))];
     }
     catch (err) {
         throw toError(err);
     }
+    // #640: bumping this crate moves it out of range of every in-repo
+    // requirement that pointed at the old version, and cargo then refuses to
+    // resolve the workspace at all — a hard failure before anything compiles,
+    // hit by the next crates.io package in the cascade rather than by this
+    // one. The build-time writers learned this in #621; the publish path is
+    // the other half.
+    written.push(...(await writeDependentVersionReqs(pkg.path, version, ctx.siblingPackagePaths)));
+    return written;
 }
 async function publishImpl(pkg, version, ctx) {
     if (await isPublishedImpl(pkg, version, ctx)) {